← Vulnerability feed

Vulnerability record · CVE-2013-2218 · published 30 September 2013

CVE-2013-2218: Redhat libvirt vulnerability

Redhat · Libvirt

Double free vulnerability in the virConnectListAllInterfaces method in interface/interface_backend_netcf.c in libvirt 1.0.6 allows remote attackers to cause a denial of service (libvirtd crash) via a filtering flag that causes an interface to be skipped, as demonstrated by the "virsh iface-list --inactive" command.

5.0 CVSS 2.0 Medium EPSS 8.3% · top 5.3% CWE-399 · CWE-399
5.0CVSS 2.0 base score
8.3%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
8References, 2 tagged exploit
16 Jun 2026Last modified by NVD

Description

Double free vulnerability in the virConnectListAllInterfaces method in interface/interface_backend_netcf.c in libvirt 1.0.6 allows remote attackers to cause a denial of service (libvirtd crash) via a filtering flag that causes an interface to be skipped, as demonstrated by the "virsh iface-list --inactive" command.

AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=244e0b8cf15ca2ef48d82058e728656e6c4bad11
http://libvirt.org/news.html
http://www.openwall.com/lists/oss-security/2013/07/01/6 Patch
https://bugzilla.redhat.com/show_bug.cgi?id=980112 Exploit
http://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=244e0b8cf15ca2ef48d82058e728656e6c4bad11
http://libvirt.org/news.html
http://www.openwall.com/lists/oss-security/2013/07/01/6 Patch
https://bugzilla.redhat.com/show_bug.cgi?id=980112 Exploit

Track CVE-2013-2218 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2016-5008Redhat libvirt improper access control vulnerabilitylibvirt before 2.0.0 improperly disables password checking when the password on a VNC server is set to an empty string, which allows remote attackers…EPSS 3.6%8.8CVE-2020-14339Redhat libvirt vulnerabilityA flaw was found in libvirt, where it leaked a file descriptor for `/dev/mapper/control` into the QEMU process. This file descriptor allows for privi…EPSS 0.42%8.8CVE-2019-10132Redhat libvirt incorrect permission assignment vulnerabilityA vulnerability was found in libvirt >= 4.1.0 in the virtlockd-admin.socket and virtlogd-admin.socket systemd units. A missing SocketMode configurati…EPSS 1.4%8.5CVE-2013-4401Redhat libvirt permissions and access controls vulnerabilityThe virConnectDomainXMLToNative API function in libvirt 1.1.0 through 1.1.3 checks for the connect:read permission instead of the connect:write permi…EPSS 1.7%8.1CVE-2017-1000256Redhat libvirt improper certificate validation vulnerabilitylibvirt version 2.3.0 and later is vulnerable to a bad default configuration of "verify-peer=no" passed to QEMU by libvirt resulting in a failure to …EPSS 1.7%7.8CVE-2019-10166Redhat libvirt improper access control vulnerabilityIt was discovered that libvirtd, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, would permit readonly clients to use the virDomainManagedSaveDe…EPSS 0.47%7.8CVE-2019-10167Redhat libvirt execution with unnecessary privileges vulnerabilityThe virConnectGetDomainCapabilities() libvirt API, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, accepts an "emulatorbin" argument to specify …EPSS 0.52%7.8CVE-2019-10168Redhat libvirt execution with unnecessary privileges vulnerabilityThe virConnectBaselineHypervisorCPU() and virConnectCompareHypervisorCPU() libvirt APIs, 4.x.x before 4.10.1 and 5.x.x before 5.4.1, accept an "emula…EPSS 0.55%

Source: NIST National Vulnerability Database (record CVE-2013-2218), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.